VirusTotal
9 / 91 engine detections
보고서 열기“about:privatebrowsing”
q58.ad5.mytemp.website — 마지막으로 알려진 활성 (HTTP 302). 브랜드 사칭: Pedagiodigital; 사기 유형: Generic Phishing. 증거 요약: VirusTotal 9/91 (alphaMountain.ai, Chong Lua Dao, ESET, Forcepoint ThreatSeeker, Fortinet); URLQuery 5 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 100/100. 등록기관: Go Daddy.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
9 / 91 engine detections
보고서 열기5 threat-system alerts
보고서 열기1/100
보고서 열기DBL_PHISH
악성
보고서 열기no community references
보고서 열기No threat flag
보고서 열기Results reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | q58.ad5.mytemp.website |
malicious | Sinkholed |
| OpenDNS | q58.ad5.mytemp.website |
phishing | Phishing Block |
| Quad9 DNS | q58.ad5.mytemp.website |
malicious | Sinkholed |
| Cloudflare DNS | q58.ad5.mytemp.website |
malicious | Sinkholed |
| Hagezi Threat Feed | q58.ad5.mytemp.website |
malicious | Sinkholed |
PhishDestroy threat report
This domain, q58.ad5.mytemp.website, is identified as a private-browsing phishing resource designed to mimic legitimate browser privacy features. Analysis indicates the site exploits the 'about:privatebrowsing' page title to deceive users into believing they are interacting with a secure, privacy-focused environment. Such tactics are commonly employed to harvest credentials, distribute malware, or conduct social engineering attacks under the guise of enhanced privacy protections. The domain’s infrastructure and deceptive design suggest it targets users seeking anonymity, increasing the likelihood of successful compromise. Infrastructure analysis reveals the domain was registered on March 11, 2026, through Go Daddy, LLC, and resolves to the IP address 107.180.119.1, hosted within AS26496 (GoDaddy.com, LLC) in the United States. The domain appears on one security blocklist, while VirusTotal reports detection by 17 out of 95 security vendors, categorizing it as malicious. The SSL certificate is issued specifically for q58.ad5.mytemp.website, further confirming its standalone phishing infrastructure rather than a compromised legitimate site. The rapid flagging by multiple detection engines underscores the domain’s elevated risk profile. Users who accessed q58.ad5.mytemp.website should immediately terminate any active sessions and clear browser data, including cookies and cached files. If credentials or sensitive information were entered, affected accounts should be secured by changing passwords and enabling multi-factor authentication where available. System scans using updated security tools are recommended to detect potential malware infections. Monitoring for unauthorized activity across linked accounts is advised, particularly for financial or identity-related services. Given the domain’s offline status, no further interaction is expected, but vigilance against similar phishing attempts remains critical.
For the registrable domain mytemp.website behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
ns02.myftpupload.comLocation describes the IP network.
d8d55bbd944e76c68583861beafedd17755d7d81e8712b67f40ddabdbfbd7301autodiscover.q58.ad5.mytemp.websitecpanel.q58.ad5.mytemp.websitecpcalendars.q58.ad5.mytemp.websitecpcontacts.q58.ad5.mytemp.websitemail.q58.ad5.mytemp.websitewebdisk.q58.ad5.mytemp.websitewebmail.q58.ad5.mytemp.websitewww.q58.ad5.mytemp.websiteSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Hostnames retained in the domain record or Certificate Transparency cache. A hostname alone does not establish current availability or malicious activity.
autodiscover.q58.ad5.mytemp.websiteDomain recordcpanel.q58.ad5.mytemp.websiteDomain recordcpcalendars.q58.ad5.mytemp.websiteDomain recordcpcontacts.q58.ad5.mytemp.websiteDomain recordmail.q58.ad5.mytemp.websiteDomain recordwebdisk.q58.ad5.mytemp.websiteDomain recordwebmail.q58.ad5.mytemp.websiteDomain recordwww.q58.ad5.mytemp.websiteDomain recordThe original observation time is not recorded for these hostnames.
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
suspended: raw=suspended; http=302; via=https_proxy; location=https://q58.ad5.mytemp.website/cgi-sys/suspendedpage.cgi; server=Apache
q58.ad5.mytemp.website
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
알 수 없음→inactive
hosting_account_suspended · suspension_page
알 수 없음→inactive
hosting_account_suspended · suspension_page
접속 가능→이용 불가
알 수 없음→live_content
content_served
이용 불가→접속 가능
알 수 없음→inactive
hosting_account_suspended · suspension_page
알 수 없음→inactive
hosting_account_suspended · suspension_page
알 수 없음→inactive
hosting_account_suspended · suspension_page
알 수 없음→inactive
hosting_account_suspended · suspension_page
redirected→inactive
hosting_account_suspended · suspension_page
접속 가능→이용 불가
알 수 없음→redirected
http_redirect
알 수 없음→redirected
http_redirect
알 수 없음→redirected
http_redirect
알 수 없음→redirected
http_redirect
알 수 없음→redirected
http_redirect
No threat flag
View source9/91 engine detections
View sourcePD-20260312-E695CE
q58.ad5.mytemp.website
View source커뮤니티 구성원 1명이 신고 · 최초 확인 2026년 3월 11일
PD-20260312-E695CE Recipient: abuse@godaddy.com 계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
q58.ad5.mytemp.website)비록 모든 세부 사항을 알지 못하더라도 — 어쨌든 신고를 하세요. 부분적인 정보라도 수사에 도움이 됩니다.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.